[THIN] KB: CTX104573 - Using Contextless Logon and Citrix Authentication

  • From: "Jim Kenzig http://thin.net" <jimkenz@xxxxxxxxxxxxxx>
  • To: thin@xxxxxxxxxxxxx
  • Date: Mon, 13 Sep 2004 11:48:06 -0400

CTX104573 - Using Contextless Logon and Citrix Authentication

This document was published at:
http://support.citrix.com/kb/entry.jspa?externalID=CTX104573


Document ID: CTX104573, Created on: Sep 9, 2004, Updated: Sep 13, 2004

Products: Citrix MetaFrame XP 1.0 for Microsoft Windows 2000, Citrix
MetaFrame XP 1.0 for Microsoft Windows 2003, Citrix MetaFrame Presentation
Server 3.0 for Microsoft Windows 2000, Citrix MetaFrame Presentation Server
3.0 for Microsoft Windows 2003, Web Interface 2.0, Web Interface for
MetaFrame Presentation Server 3.0

Symptom

Unable to logon, through Web Interface or through an application set, using
contextless logon.

Cause

Contextless logon requires that you either tab to the password field after
entering the user name or click in the password field with the mouse after
entering the user name. This can be accomplished only when using NWGINA.
When you tab to the password field after entering the username, the Novell
client does an ldap query to obtain the users? context without the users
having to know or type their context.

This cannot be accomplished when being prompted to logon using CTXGINA or
MSGINA. Contextless logon works for a custom ICA connection and on the
console because the users are prompted to logon with NWGINA.

Resolution

Context search (not contextless) is an option that you can use. See the Web
Interface Administrator?s Guide for additional information.

Novell has acknowledged that this can be accomplished only when NWGINA is
being used to pass the credentials.

Additional Links

See the following Web sites for additional information:

http://support.novell.com/cgi-bin/search/searchtid.cgi?/10026599.htm

http://www.novell.com/coolsolutions/nds/features/a_citrix_integration_method
ology.html

Contextless Login Configuration

Initial testing has shown that Contextless login is keyed to the use of the
tab key to trigger the contextless login process. If the Citrix client is
doing any form of credential passing to Novell for authentication purposes
effectively the tab key 'event' (when the user moves from user to the tree
field in the client) never happens and the Contextless login never happens.
If NFUSE is being used to present thin client apps then the same problem
occurs. Due to the issues within this section then the Novell Client 4.9
contextless login capability will remain disabled.



If NFUSE or the Citrix Client are not being used to pass on authentication
credentials to the eDir back-end then enabling contextless login may be of
benefit.

********************************************************
This Weeks Sponsor triCerat:
Have you had your fill of printing support calls, unauthorized apps running on 
unsecured Terminal Servers, profile headaches, and application performance 
problems? Join us and learn how you can have a less demanding on-demand 
enterprise!
http://www.tricerat.com/?page=events#register 
********************************************************** 
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm

Other related posts: